Privacy Policy

1. Who we are

KITROS INFOTECH is a proprietorship registered in India, trading as EXEX. We are the data controller for the personal data described in this policy.

2. What we collect

• Business information you submit — the Google Maps link or business name you enter, and the business details and reviews that Google returns for it (name, address, phone number, rating, review text, photos, opening hours).
• Content you enter — a website address, products, prices and custom button links you add.
• Contact details — your email address, if you provide one at checkout, so we can send you your live link.
• Payment records — order id, payment id, amount paid and timestamp. We do not receive or store card numbers, UPI PINs, passwords or banking credentials; Razorpay handles those entirely.
• Technical data — your IP address and user agent, used to rate-limit requests and prevent abuse.
• Cookies — we set no advertising or analytics cookies. A cookie-free site is what we ship, and this policy will change if that does.

3. Where your data comes from

Business information is retrieved from the Google Maps Platform (Places API), which is subject to Google’s terms. Google, not we, is the source of that data and remains its owner.

4. What we do with it

• To generate and display your website to you.
• To publish and serve your website at the address you chose.
• To process and record your payment, and provide support.
• To send you your live link, and service messages about your subscription.
• To detect and block abuse, including scraping of the photo service and automated high-volume requests.
• To meet tax and accounting obligations.

We do not sell your data, and we do not use your business content to advertise other businesses to your competitors.

5. Third parties

• Google — Places API for business data and photographs, Google Fonts for typography, and Google Maps for the optional embedded map on your site.
• Razorpay — payment processing. Razorpay handles your payment credentials under its own privacy policy.
• Vercel — hosting and CDN, which processes IP addresses as part of serving the site.
• Email delivery — our transactional email provider, used only if you give us an email address.

6. How long we keep it

• Unpublished drafts — up to 2 hours, then deleted automatically.
• Published sites — for the duration of your subscription, and for up to 12 months after it ends so you can retrieve your site.
• Cached business data and photos — up to 24 hours, to reduce the cost and load on Google’s API.
• Invoices and payment records — 24 months, and for as long afterwards as Indian tax and accounting law requires.

7. Security

Data is served over HTTPS. Payments go directly to Razorpay over an encrypted channel. Your Google API key is never written into a website we generate or serve, and photo requests are validated so our service cannot be used as a general-purpose proxy.

No system is perfectly secure. If a breach affects your data we will notify you and the relevant authority as required by law.

8. Your rights

You may, at any time, ask us to:

• confirm what personal data we hold about you;
• correct anything inaccurate;
• delete your published site and associated data;
• stop sending you service messages.

Email marketing@adzbe.com and we will respond within 30 days. We may need to verify your identity before acting on a request.

9. Cookies and local storage

EXEX uses browser local storage to remember your in-progress edits between page loads. That data stays on your device and is never transmitted to us until you publish. We set no advertising, profiling or third-party analytics cookies.

10. Children

Our service is not directed at children and is not intended for use by anyone under 18. We do not knowingly collect data from children.

11. Changes to this policy

We will update this page when our practices change and revise the date at the top. Continuing to use the service after a change means you accept the revised policy.